Privacy Policy
Last Updated: April 2026
1. Data Controller
Terra Connect Ltd (“we”, “us”, “our”) is the data controller responsible for the personal data collected through our website terraconnect.co.uk and our related services.
Registered Name: Terra Connect Ltd
Registered In: England & Wales
Registered Office: 57 Tonbridge Drive, Basildon, SS15 6ND, United Kingdom
Company No.: 12492304 (Registered in England & Wales)
Data Protection Contact: privacy@terraconnect.co.uk
This policy is issued under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). Where we refer to “GDPR” in this policy, we mean the UK GDPR as retained in domestic law.
2. Information We Collect
We collect the following categories of personal data:
a) Information You Provide Directly
- Contact details – name, email address, phone number, company name (when you submit a contact or quote request form)
- Project information – details about your requirements that you voluntarily share with us
- Communications – the content of emails, messages, or enquiries you send us
b) Information Collected Automatically
- Device data – IP address (anonymised), browser type and version, operating system, screen resolution
- Usage data – pages visited, time spent on pages, referring URLs, click paths (collected only with your consent via Google Analytics)
- Cookie data – see our Cookie Policy for full details
c) Information We Do Not Collect
We do not knowingly collect special category data (e.g. health, ethnicity, political opinions, biometric data), nor do we collect personal data from children under 16.
3. Lawful Basis for Processing
Under UK GDPR Article 6, we rely on the following lawful bases:
| Processing Activity | Lawful Basis |
|---|---|
| Responding to your contact-form enquiries | Consent (Article 6(1)(a)) – you actively submit the form |
| Delivering services you have contracted | Contract (Article 6(1)(b)) – necessary to fulfil our agreement |
| Sending marketing communications | Consent (Article 6(1)(a)) – only with your explicit opt-in |
| Analytics cookies (Google Analytics) | Consent (Article 6(1)(a)) – via our cookie consent banner; analytics are blocked until you accept |
| Improving our website and services | Legitimate Interests (Article 6(1)(f)) – we have a legitimate interest in understanding how our website is used; we have assessed that this does not override your rights |
| Complying with legal or regulatory obligations | Legal Obligation (Article 6(1)(c)) – e.g. tax, accounting, or law-enforcement requests |
Where we rely on legitimate interests, we have carried out a Legitimate Interest Assessment (LIA) and concluded that our processing is proportionate and does not override your fundamental rights. You may request a copy of this assessment by contacting us.
4. How We Use Your Information
- To respond to your enquiries and provide quotations
- To deliver, manage, and improve the services you have requested
- To send marketing communications (only with your prior consent; you may withdraw consent at any time)
- To analyse aggregated, anonymised website usage via Google Analytics (only after you consent to analytics cookies)
- To maintain the security and integrity of our website
- To comply with applicable laws and regulations
5. Data Sharing & Processors
We do not sell, rent, or trade your personal data.
We may share data with the following categories of third-party processors, each of whom operates under a Data Processing Agreement (DPA) compliant with UK GDPR Article 28:
| Processor | Purpose | Location |
|---|---|---|
| Google LLC (Google Analytics) | Website analytics (consent-gated) | USA (see Section 7) |
| Website hosting provider | Hosting & content delivery | UK / EEA |
| Email service provider | Transactional & marketing emails | UK / EEA |
We may also disclose data when required by law, court order, or to protect the rights, property, or safety of Terra Connect Ltd, our clients, or others.
6. Data Retention
We keep your personal data only for as long as necessary for the purposes set out in this policy:
| Data Category | Retention Period |
|---|---|
| Contact-form enquiries | 12 months from submission, then securely deleted |
| Client project data | Duration of the contract plus 6 years (legal/tax obligation) |
| Analytics data (Google Analytics) | 14 months (configured in our GA property) |
| Marketing subscriber data | Until you unsubscribe, or 24 months of inactivity, whichever is sooner |
| Cookie consent record | 12 months (then re-prompted) |
When the retention period expires, data is securely deleted or irreversibly anonymised.
7. International Data Transfers
Some of our processors are based outside the UK. Where personal data is transferred to a country that does not benefit from a UK adequacy decision, we ensure appropriate safeguards are in place:
- Google Analytics (USA) – protected by the UK International Data Transfer Agreement (IDTA) / Addendum to Standard Contractual Clauses, Google’s Data Processing Amendment, and supplementary technical measures including IP anonymisation, encryption in transit, and disabling of ad-personalisation signals.
You may request a copy of the relevant safeguards by emailing privacy@terraconnect.co.uk.
8. Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you have the following rights. You can exercise any of them free of charge by emailing privacy@terraconnect.co.uk. We will respond within one calendar month (extendable by two further months for complex requests, with notice).
| Right | What It Means |
|---|---|
| Access (Article 15) | Request a copy of the personal data we hold about you |
| Rectification (Article 16) | Ask us to correct inaccurate or incomplete data |
| Erasure (Article 17) | Ask us to delete your data (“right to be forgotten”) where there is no compelling reason for continued processing |
| Restriction (Article 18) | Ask us to limit how we use your data while a concern is investigated |
| Portability (Article 20) | Receive your data in a structured, commonly used, machine-readable format |
| Objection (Article 21) | Object to processing based on legitimate interests or direct marketing at any time |
| Withdraw Consent | Withdraw any previously given consent at any time, without affecting the lawfulness of processing before withdrawal |
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
9. Automated Decision-Making & Profiling
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you (UK GDPR Article 22).
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data (UK GDPR Article 32), including:
- SSL/TLS encryption for all data in transit
- Content Security Policy (CSP) headers to prevent cross-site scripting
- IP anonymisation in Google Analytics (
anonymize_ip: true) - Ad-personalisation signals disabled in analytics
- Regular security reviews and software updates
- Access controls limiting data access to authorised personnel only
No method of transmission or storage is 100% secure. If you believe your data has been compromised, please contact us immediately.
11. Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
- Notify the ICO within 72 hours of becoming aware of the breach (UK GDPR Article 33)
- Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms (UK GDPR Article 34)
- Document all breaches, their effects, and the remedial actions taken
12. Cookies
We use cookies on this website. Non-essential cookies (analytics) are blocked by default and only activated after you give explicit consent via our cookie banner. For full details, including cookie names, purposes, durations, and how to manage your preferences, please see our Cookie Policy.
13. Children’s Privacy
Our website and services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us and we will delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how we handle your data, please contact us:
Data Protection Contact: privacy@terraconnect.co.uk
General Enquiries: hello@terraconnect.co.uk
Website: terraconnect.co.uk/contacts
Company: Terra Connect Ltd (Company No. 12492304)
Address: 57 Tonbridge Drive, Basildon, SS15 6ND, United Kingdom